Ecosyste.ms: Awesome

An open API service indexing awesome lists of open source software.

https://github.com/Zarcolio/sitedorks

Search Google/Bing/Ecosia/DuckDuckGo/Yandex/Yahoo for a search term (dork) with a default set of websites, bug bounty programs or custom collection.
https://github.com/Zarcolio/sitedorks

baidu bing bugbounty bugcrowd duckduckgo google google-dorks googledork hackerone hacking infosec intigriti osint python3 recon reconnaissance search search-engines yahoo yandex

Last synced: 13 days ago
JSON representation

Search Google/Bing/Ecosia/DuckDuckGo/Yandex/Yahoo for a search term (dork) with a default set of websites, bug bounty programs or custom collection.

Lists

README

        

![](https://img.shields.io/github/license/Zarcolio/sitedorks) ![](https://badges.pufler.dev/visits/Zarcolio/sitedorks) ![](https://img.shields.io/github/stars/Zarcolio/sitedorks) ![](https://img.shields.io/github/forks/Zarcolio/sitedorks) ![](https://img.shields.io/github/issues/Zarcolio/sitedorks) ![](https://img.shields.io/github/issues-closed-raw/Zarcolio/sitedorks) ![](https://img.shields.io/github/issues-pr/Zarcolio/sitedorks) ![](https://img.shields.io/github/issues-pr-closed-raw/Zarcolio/sitedorks)

Want to get the latest updates?
Be sure to ⭐ this repo!

# About [SiteDorks](https://github.com/Zarcolio/sitedorks) ![](https://img.shields.io/static/v1?label=&message=Help%20wanted&color=green)

Search Google, Bing, Brave, Ecosia, Yahoo or Yandex for a search term with several websites. A [default list](https://github.com/Zarcolio/sitedorks/blob/master/csv/sitedorks.csv) is already provided, which contains Github, Gitlab, Surveymonkey, Trello etc etc. Currently, a default list of 577 dorkable websites is available.

By default, the following categories are on file:

* analysis(13)
* cloud(86)
* comm(82)
* dev(70)
* docs(78)
* edu(13)
* fin(15)
* forms(12)
* orgs(56)
* other(7)
* remote(1)
* shortener(38)
* social(98)
* storage(9)

# Why use SiteDorks?
Why wouldn't you just enter dorks for several websites manually? Think of this:
* It's really easy to query different search engines.
* Dorks can be executed per 1 or more categories.
* It's easy to create different input files for different uses.
* Adding new websites to your search query can be arranged by just adding them to an input file (either a CSV with categories or just a list of sites).
* It already has a lot of dorkable websites included.
* The list with dorkable websites is updated regularly.
* Some search engines ignore too many keywords/characters in a query and with argument -count it's easy to split your dork into more queries.
* It contains a list of several bug bounty platforms. With 1 command you can search domains of programs on several bug bounty platforms. Find the "easter egg" in this feature :)
* It contains generic lists for other counties such as [China](https://github.com/Zarcolio/sitedorks/blob/master/csv/sitedorks-cn.csv), [France](https://github.com/Zarcolio/sitedorks/blob/master/csv/sitedorks-fr.csv), [Germany](https://github.com/Zarcolio/sitedorks/blob/master/csv/sitedorks-de.csv), [Korea](https://github.com/Zarcolio/sitedorks/blob/master/csv/sitedorks-kr.csv), [The Netherlands](https://github.com/Zarcolio/sitedorks/blob/master/csv/sitedorks-nl.csv) and [Russia](https://github.com/Zarcolio/sitedorks/blob/master/csv/sitedorks-ru.csv).
* Need help here with generic lists for other countries, both with more entries in the current lists and with more lists. ![](https://img.shields.io/static/v1?label=&message=Help%20wanted&color=green)
* It contains a list of Dutch governmental agencies and educational services. With 1 command you can search domains of either the Dutch government or educational services.
* Need help here with other lists that can be useful, for example domains of government and educational services in other countries. ![](https://img.shields.io/static/v1?label=&message=Help%20wanted&color=green)
* Because you want to help plant more trees using the search engine [Ecosia](https://www.ecosia.org) (Bing based).

# Install
SiteDorks should be able to run with a default Kali Linux installation using Python 3 without installing additional Python packages.
Just run:
```
git clone https://github.com/Zarcolio/sitedorks
cd sitedorks
bash install.sh
```
If you're running into trouble running SiteDorks, please drop me an [issue](https://github.com/Zarcolio/sitedorks/issues) and I'll try to fix it :)

# Usage
```
usage: sitedorks [-h] [-browser ] [-cat ] [-cats] [-count ] [-engine ] [-file ]
[-query ] [-site ] [-excl ] [-echo]

Use your favorite search engine to search for a search term with different websites. Use single quotes around a
query with double quotes. Be sure to enclose a query with single quotes it contains shell control characters like
space, ';', '>', '|', etc.

optional arguments:
-h, --help Show this help message, print categories on file (add -file to check other CSV file) and exit.
-hh, --help2 Show the help inside a .csv file being called. Lines in the beginning of the script starting with # are displayed as help.
-browser Supply the browser executable to use or use the default browser.
-cat Choose from 1 or more categories, use ',' (comma) as delimiter. Defaults to all categories.
-cats Show all categories on file, use with or without -file.
-count How many websites are searched per query. Google has a maximum length for queries.
-engine Search with 'google', 'baidu', 'bing', 'brave', 'bing-ecosia', 'duckduckgo' 'yahoo' or 'yandex', defaults to 'google'.
-file Enter a custom website list.
-filter Only query for sites with this string.
-query Enter a mandatory search term.
-site Turn the 'site:' operator 'on' or 'off', or replace it with 'inurl:' (only for Google), defaults to 'on'.
-excl Excluded these domains from the search query.
-echo Prints the search query URLs, for further use like piping or bookmarking.
-ubb Updates bug bounty files (in en out scope) and exits. Uses bbrecon.
-wait Wait x seconds, defaults to 7 seconds.
```

# Examples
Small warning here: if you don't use **-cat** SiteDorks will open a lot of tabs in your browser and probably will make Google throw you a CAPTCHA. Increase waiting time with option '-wait' to decrease the chance of getting a CAPTCHA.

Want to look for "uber.com" with different sites containing all kinds of content using Google? Use the following command:
```
sitedorks -query '"uber.com"'
```
Want to look for "uber website" (with quotes and spaces in the query)? Use the following command:
```
sitedorks -query '"uber website"'
```
Want to search for communication invites with Yandex but leave site: out of the query? Just use the following command:
```
sitedorks -cat comm -site disable -engine yandex -query uber
```
And if you want to see which categories are on file, for example with the [hackerone](https://www.hackerone.com) platform:
```
sitedorks -file sitedorks-bbrecon.csv -cats
```
If you want to download/update the bug bounty files, you can use the -ubb parameter (it uses [bbrecon](https://github.com/serain/bbrecon)):
```
sitedorks -ubb
```
The -ubb argument creates two files: sitedorks-bbrecon-inscope.csv and sitedorks-bbrecon-outscope.csv.
Use the following command for finding exploitable systems or juicy info (always check if a system is in scope, although these these domains are in scope, it doesn't always mean that this subdomain or system is):
```
sitedorks -file sitedorks-bbrecon-inscope.csv -cat somevdp -query "exploitable systems/juicy info"
```
Use this command for finding juicy info only, because these domains are out of scope:
```
sitedorks -file sitedorks-bbrecon-outscope.csv -cat somevdp -query "juicy info"
```
For searching in Dutch (para)medical websites, use the following command:
```
sitedorks -cat medi -file sitedorks-nl.csv -query somekeyword
```

# Google Dorks
Don't know what to look for?
Try:
* https://twitter.com/search?q=%23googledork%20OR%20%23googledorks
* https://gbhackers.com/latest-google-dorks-list
* https://www.dorksearch.com

# Contribute?
Do you have some usefull additions to SiteDorks script or to the list of dorkable websites:

* [![PR's Welcome](https://img.shields.io/badge/PRs-welcome-brightgreen.svg?style=flat)](https://github.com/Zarcolio/sitedorks/pulls)
* [![Twitter](https://img.shields.io/twitter/url/https/twitter.com/zarcolio.svg?style=social&label=Contact%20me)](https://twitter.com/zarcolio)